An AI agent books and pays for a coffee tasting on a live Danske Bank card

Seventeen months passed between Mastercard introducing Agent Pay in April 2025 ^[5] and an agent settling a coffee tasting on a Danske-issued card on 21 September 2026 ^[2][16]. Three European national firsts fall inside the last six of those months, starting with Santander in March 2026 ^[9][17]. Each one requires a different incumbent to accept agent-flagged authorisations into its own stream. The network is being built one issuer at a time.

Payment Passkeys authenticate the purchase, and the issuer can see that an agent, not a cardholder tapping a website, started it ^[6]. "Agent Pay is designed to ensure that AI-powered transactions are transparent, securely authenticated and always under the consumer's control," said Erik Gutwasser, Mastercard's Northern Europe division president. "At the same time, the solution gives card issuers better insight into transactions initiated by AI agents." ^[7]

That insight is the commercial content of the pilot. Crowdfund Insider wrote that the Danish case matters because it ran through an incumbent issuer's card and systems, not a sandbox wallet ^[10]. The same account lists what banks have to settle next: how much authority an agent receives, how that authority is limited, how to separate a customer's intent from the agent's interpretation of it, and who bears the loss if the agent books the wrong thing ^[11]. The last of those is a chargeback question, and it sets the ceiling a bank will allow an agent to spend. Neither company disclosed the value of the transaction ^[15].

On demand, the two named executives point in opposite directions. PYMNTS put the number of Americans already using AI at 132 million ^[20]. Chiro Aikat, Mastercard's US co-president, compared agent payments to earlier card learning curves. "EMV, pay by phone and others as well," Aikat said. "Agentic is exactly like that. In many ways, it's accelerating faster." ^[13] PYMNTS chief executive Karen Webster cited her own firm's research against that. "We've seen this in our data," Webster said, pointing out that consumers' "interest over time in terms of delegating authority has declined, even though usage has increased." ^[14]

For Danske the coffee tasting is the cheap end of a larger build. The bank has been expanding cloud and model infrastructure with Amazon Web Services, including Amazon Bedrock and AgentCore, to move agent-style tools out of testing ^[18], and it has piloted a Model Context Protocol server so corporate clients can point their own AI assistants at bank data through Premium APIs ^[19]. "At Danske Bank, we are exploring the possibilities of the new technology with a strong focus on customer value, trust and control," said Mark Wraa-Hansen, the bank's head of personal banking for Denmark ^[8].

In my view the authentication layer is done and the permission layer is not. The binding constraint is customer willingness and a written allocation of loss. Aikat's analogy is the serious counter, since EMV and phone payments were also treated as behaviour problems before they became defaults ^[13], and on that reading the decline Webster reports is a lag rather than a ceiling ^[14]. A third path: agent-to-agent traffic arrives first and consumer delegation stays small ^[12]. What would change the view is an Agent Pay general release carrying published per-agent caps and a stated liability rule, or a fourth and fifth national first announced without one.